Sunday, June 1, 2014

We can configure WSO2 API Manager to send user attributes to backend API, if the internal users of API Manager consumes the API using obtained OAuth token. That process is described in https://docs.wso2.org/display/AM170/Passing+Enduser+attributes+to+the+Backend+Using+JWT. JSON Web Token(JWT) tokens are used in this.

But when users get OAuth token using SAML2 Bearer Assertion Profile for OAuth 2.0 how can we do that? What we need to do is share the user store with IS as well as API Manger. That kind of a architecture is given below.

1 comment:

Could you please share complete steps and sample program? We're looking forward for your help/guidance.Your post is good, but doesn't suggest anything how to implement it practically. So requesting you to provide sample code.